Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e42ad20c-6a24-30af-9734-3130351ecc04.roa
File: e42ad20c-6a24-30af-9734-3130351ecc04.roa (raw, json)
Hash identifier: r3C2jnoyBt3zuNIWEje1JfJfHNKNE3YuGlF5wHi8l6A=
Subject key identifier: B6:09:D0:E4:FC:9B:31:7B:D1:C4:A7:A9:C5:B1:8D:33:F6:F8:7E:95
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848A9962F25A1E603AA4511BE00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e42ad20c-6a24-30af-9734-3130351ecc04.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 21859
IP address blocks: 108.165.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:2f:25:a1:e6:03:aa:45:11:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=3ed49d16-cd88-49cd-96a7-6f0911092b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:b2:f2:8b:5b:46:bc:4f:db:34:9d:b0:d5:
ea:64:a2:6f:4c:87:ec:16:66:4c:89:a4:51:34:f1:
71:a4:c2:a7:92:fb:01:6d:36:98:f8:e1:fd:19:37:
2f:8e:48:78:84:48:ee:13:21:b2:36:ad:12:44:05:
cd:62:a4:f4:8a:20:ba:bb:68:9f:de:1b:4e:90:63:
da:db:79:09:0c:8c:59:9e:ee:37:c4:c2:7c:5b:d3:
ea:ad:ad:51:81:74:1e:8a:3d:c0:10:79:03:29:4f:
13:c3:44:40:c0:0a:47:a3:8d:6c:bc:6c:d7:c9:74:
61:26:80:00:07:b3:58:da:c3:cc:6f:3c:02:af:bd:
5c:e6:5b:cf:8a:45:53:28:60:4a:1a:ab:3a:11:e1:
9d:b9:6f:e2:2a:24:ad:ee:30:96:69:f1:d3:81:50:
bd:c9:58:b7:2e:c4:52:50:46:a2:57:eb:8e:30:19:
25:3e:4a:d6:94:21:3f:e2:16:22:6a:00:49:7c:14:
20:ca:80:e8:6e:cb:fa:d8:44:64:fd:4b:41:cc:37:
4f:b7:ad:f9:e3:e3:26:f2:1b:1e:7d:5e:e1:82:6c:
7f:b5:ca:e7:be:2b:47:44:cd:41:c1:c1:9b:ed:45:
30:5c:72:17:14:d7:d2:26:28:a5:ba:85:b0:c0:72:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:09:D0:E4:FC:9B:31:7B:D1:C4:A7:A9:C5:B1:8D:33:F6:F8:7E:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e42ad20c-6a24-30af-9734-3130351ecc04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:39:2f:f3:f7:21:a6:da:59:a4:8a:5c:1a:fa:d0:dd:82:1b:
e7:ee:4d:71:91:77:32:a2:6a:51:f1:eb:7c:6c:c2:f0:f2:85:
96:77:8a:cc:96:2e:90:d6:3b:4d:ea:ad:f5:bf:a8:5c:54:0b:
6e:05:66:5f:5e:e1:16:82:69:4f:86:08:9b:d1:77:a5:e2:5d:
40:f7:c5:f3:e4:f1:2a:b4:17:3a:83:51:45:d3:a8:a4:30:8b:
65:82:50:ec:3a:4e:c3:c2:fe:85:ab:47:50:ef:1f:9f:28:22:
a8:3d:72:1e:6a:b7:d0:53:4f:d8:8d:bd:ba:d6:b8:04:31:8f:
71:34:7b:ce:ce:28:d6:9c:23:94:ab:0f:aa:d0:0a:d7:51:ce:
83:0a:af:2f:32:26:99:1a:61:0e:67:8f:cf:22:d4:98:7b:d3:
48:31:b9:70:b7:e4:2d:19:64:1b:c9:34:e1:e3:af:94:95:40:
5e:a1:f4:bb:4a:84:9b:75:a6:93:1c:f1:17:74:0f:e3:4c:e2:
e5:6f:33:e1:e4:b0:9f:5a:2e:ae:ae:81:03:3b:57:96:d3:f6:
75:7d:0a:0e:18:c9:8d:7b:97:69:c6:5c:78:22:08:aa:4e:77:
17:c6:33:45:89:84:db:30:01:5d:22:9c:03:79:09:3e:7e:d4:
dd:cf:5a:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipli8loeYDqkURvgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk
M2VkNDlkMTYtY2Q4OC00OWNkLTk2YTctNmYwOTExMDkyYjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLCy8otbRrxP2zSdsNXqZKJvTIfsFmZMiaRR
NPFxpMKnkvsBbTaY+OH9GTcvjkh4hEjuEyGyNq0SRAXNYqT0iiC6u2if3htOkGPa
23kJDIxZnu43xMJ8W9Pqra1RgXQeij3AEHkDKU8Tw0RAwApHo41svGzXyXRhJoAA
B7NY2sPMbzwCr71c5lvPikVTKGBKGqs6EeGduW/iKiSt7jCWafHTgVC9yVi3LsRS
UEaiV+uOMBklPkrWlCE/4hYiagBJfBQgyoDobsv62ERk/UtBzDdPt6354+Mm8hse
fV7hgmx/tcrnvitHRM1BwcGb7UUwXHIXFNfSJiiluoWwwHI1HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYJ0OT8mzF70cSnqcWxjTP2+H6VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvZTQyYWQyMGMtNmEyNC0z
MGFmLTk3MzQtMzEzMDM1MWVjYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKV1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU5L/P3IabaWaSKXBr60N2CG+fuTXGRdzKialHx63xswvDyhZZ3isyW
LpDWO03qrfW/qFxUC24FZl9e4RaCaU+GCJvRd6XiXUD3xfPk8Sq0FzqDUUXTqKQw
i2WCUOw6TsPC/oWrR1DvH58oIqg9ch5qt9BTT9iNvbrWuAQxj3E0e87OKNacI5Sr
D6rQCtdRzoMKry8yJpkaYQ5nj88i1Jh700gxuXC35C0ZZBvJNOHjr5SVQF6h9LtK
hJt1ppMc8Rd0D+NM4uVvM+HksJ9aLq6ugQM7V5bT9nV9Cg4YyY17l2nGXHgiCKpO
dxfGM0WJhNswAV0inAN5CT5+1N3PWtE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:47 2025 by rpki-client